Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/6997df4b-71d9-3f8d-a2ad-4511f636c7a2.roa
File: 6997df4b-71d9-3f8d-a2ad-4511f636c7a2.roa (raw, json)
Hash identifier: rII5r8lfZYSy9zSqGjWeCruV6EKYAFYmIrC9S24u/TI=
Subject key identifier: FC:08:F4:32:D8:6D:1C:A0:B2:20:25:A2:62:1D:B4:BB:8A:80:71:BC
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F432858483042000731B3CDEB60AE7C00
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/6997df4b-71d9-3f8d-a2ad-4511f636c7a2.roa
Signing time: Fri 13 Dec 2024 02:58:40 +0000
ROA not before: Fri 13 Dec 2024 02:58:40 +0000
ROA not after: Thu 13 Mar 2025 01:58:40 +0000
asID: 13335
IP address blocks: 172.71.21.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:30:42:00:07:31:b3:cd:eb:60:ae:7c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Dec 13 02:58:40 2024 GMT
Not After : Mar 13 01:58:40 2025 GMT
Subject: CN=0011de40-63a6-4299-b6bd-21baaf540caf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:5e:9f:67:34:ea:22:65:1a:39:73:a3:9f:ef:
63:af:28:2b:bb:4d:2b:64:22:bd:72:c7:aa:61:37:
2e:ed:5c:58:0e:ec:a5:8c:34:b6:ef:65:d2:55:d4:
45:4c:9a:dc:fc:a2:3f:ab:bf:e7:fa:8d:f8:f0:29:
ee:74:19:d6:db:72:ee:d9:ef:16:ec:6a:e6:b7:ba:
17:38:a0:b4:3d:ae:98:ef:ad:8e:1e:e4:26:f1:08:
ca:7a:79:4f:38:ff:11:43:c5:37:8b:c6:2a:5d:fd:
d7:bd:85:95:40:5c:59:06:bc:2f:9f:84:aa:63:61:
ee:04:c2:9e:41:06:c9:c8:37:86:91:60:ba:9c:4b:
03:bf:ce:42:85:87:12:ca:c0:b2:5a:76:d5:b4:6b:
72:d0:17:36:3c:44:e0:c5:b3:04:8f:ba:f7:be:be:
69:89:26:0c:48:31:83:9a:be:6b:56:fc:a5:db:a5:
16:61:b5:3a:25:e9:34:0e:41:6b:a0:11:61:4a:ad:
bb:f2:be:68:98:fe:f9:e1:4b:14:6a:81:47:0c:5c:
db:13:6b:4c:8e:2d:29:82:ec:7a:bf:ca:c6:51:17:
24:b2:86:a6:27:4c:8e:d8:5c:80:81:a9:e1:97:f9:
aa:83:33:b7:e8:50:55:7a:a3:5b:77:41:b4:38:fb:
8f:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:08:F4:32:D8:6D:1C:A0:B2:20:25:A2:62:1D:B4:BB:8A:80:71:BC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/6997df4b-71d9-3f8d-a2ad-4511f636c7a2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
172.71.21.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
07:72:e6:b7:d6:87:b5:9b:ec:70:11:cb:cb:52:f2:42:e6:90:
3c:d7:de:68:9a:dc:50:07:0b:dd:85:a4:35:2a:02:57:24:49:
99:97:bb:bb:d4:d9:5b:08:16:25:3d:84:6e:08:0f:31:c4:0e:
84:0d:dd:c5:7e:09:3c:d3:16:b5:83:a6:a5:b2:16:8a:ca:17:
f1:33:9b:a1:17:17:f5:6a:db:d4:b5:59:84:c8:93:38:98:cb:
b7:cc:6f:2c:4f:6b:25:18:a2:e0:26:0b:7d:c6:ef:9b:63:18:
3a:74:54:2a:9d:71:91:82:58:ba:18:ce:06:60:63:74:b5:ab:
bd:1b:58:fc:08:8d:7f:3b:75:d2:75:a9:86:dd:aa:df:ad:15:
7f:f7:34:59:a9:d9:fe:0e:c2:af:75:12:28:b3:36:f0:66:99:
17:9f:6a:ad:f5:40:eb:a4:b3:ec:1f:22:91:87:6e:05:4b:fa:
bc:36:6f:ce:71:1b:0f:8a:e3:63:b6:f0:93:51:d5:f1:d6:0d:
63:d2:d7:fd:4c:64:00:cd:5f:55:7c:7e:5c:ba:1a:62:ec:55:
35:c2:3f:01:65:62:37:4a:00:db:ca:ca:2b:22:9a:6d:93:7b:
6e:59:02:87:a2:d3:9c:eb:3b:fb:d8:47:78:8f:02:ac:a3:ea:
10:d2:ad:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 16:18:18 2025 by rpki-client